Help with boot disk

[artmerar]

Hi,

I have a clients computer that is infected with a nasty virus. Even
McAfee will not clean it. Anyhow, I found instructions on how to
clean it, but I need to boot into DOS to remove some files.

Where or how can I create a boot CD so I can boot this laptop into
DOS? The disk is NTFS, so that makes it an issue....

Thanks!

 

[Clark]

Hi,

I have a clients computer that is infected with a nasty virus. Even
McAfee will not clean it. Anyhow, I found instructions on how to
clean it, but I need to boot into DOS to remove some files.

Where or how can I create a boot CD so I can boot this laptop into
DOS? The disk is NTFS, so that makes it an issue....

Thanks!

http://www.ubcd4win.com/downloads.htm

fantastic tool, need to do some learning, so study up , read up on the
website and forums.

UBCD4Win is a bootable recovery CD that contains software used for
repairing, restoring, or diagnosing almost any computer problem. Our goal is
to be the most complete and easy to use free computer diagnostic tool.
Almost all software included in UBCD4Win are freeware utilities for
Windows®. Some of the tools included are "free for personal use" copies so
users need to respect these licenses. A few of the tools included in
UBCD4Win are paid for and licensed software owned by UBCD4win.<snip>
Good luck. I'll watch this thread just in case...

Clark...

 

[Pegasus \(MVP\)]

Hi,

I have a clients computer that is infected with a nasty virus. Even
McAfee will not clean it. Anyhow, I found instructions on how to
clean it, but I need to boot into DOS to remove some files.

Where or how can I create a boot CD so I can boot this laptop into
DOS? The disk is NTFS, so that makes it an issue....

Thanks!

DOS won't help you because DOS does not recognise NTFS.
Here are a few options:
- Boot into the Recovery Console.
- Connect the disk as a slave disk to some other WinXP/2000 PC.
- Boot the machine with a Bart PE boot CD.

Creating a Bart PE boot CD may take a couple of hours but this
tool is IMO an indispensable tool for a sysadmin.

Note also that an infected machine is a compromised machine.
Not all damage caused by a virus can be removed.

 

[Frank Saunders MS-MVP IE,OE/WM]

Hi,

I have a clients computer that is infected with a nasty virus. Even
McAfee will not clean it. Anyhow, I found instructions on how to
clean it, but I need to boot into DOS to remove some files.

Where or how can I create a boot CD so I can boot this laptop into
DOS? The disk is NTFS, so that makes it an issue....

Thanks!

You can't run DOS on NTFS, but you can get a good emulation:

Restart the computer and as soon as you see that first page start tapping F8
once a second until you get a menu. Select Safe Mode with Command Prompt.

 

[Mick Murphy]

Tap F8 right at Startup, and go into Safe Mode.
Once in Safe Mode, run McAfee again to clear virus.

 

[artmerar]

DOS won't help you because DOS does not recognise NTFS.
Here are a few options:
- Boot into the Recovery Console.
- Connect the disk as a slave disk to some other WinXP/2000 PC.
- Boot the machine with a Bart PE boot CD.

Creating a Bart PE boot CD may take a couple of hours but this
tool is IMO an indispensable tool for a sysadmin.

Note also that an infected machine is a compromised machine.
Not all damage caused by a virus can be removed.

Well, only problem is that this is a laptop......so, a bit
harder......

 

[artmerar]

http://www.ubcd4win.com/downloads.htm

fantastic tool, need to do some learning,  so study up , read up on the
website and forums.

UBCD4Win is a bootable recovery CD that contains software used for
repairing, restoring, or diagnosing almost any computer problem. Our goalis
to be the most complete and easy to use free computer diagnostic tool.
Almost all software included in UBCD4Win are freeware utilities for
Windows®. Some of the tools included are "free for personal use" copiesso
users need to respect these licenses. A few of the tools included in
UBCD4Win are paid for and licensed software owned by UBCD4win.<snip>
Good luck. I'll watch this thread just in case...

Clark...

Clark,

Can this help remove visuses? The actual virus this laptop has can
be seen here: http://www.bleepingcomputer.com/forums/topic31163.html

It says I need to boot to DOS and remove files because Windows will
always have them in use......

I know I cannot see an NTFS parition, so, what other options do I
have??

 

[Pegasus \(MVP\)]

http://www.ubcd4win.com/downloads.htm

fantastic tool, need to do some learning, so study up , read up on the
website and forums.

UBCD4Win is a bootable recovery CD that contains software used for
repairing, restoring, or diagnosing almost any computer problem. Our goal
is to be the most complete and easy to use free computer diagnostic tool.
Almost all software included in UBCD4Win are freeware utilities for
Windows®. Some of the tools included are "free for personal use" copies so
users need to respect these licenses. A few of the tools included in
UBCD4Win are paid for and licensed software owned by UBCD4win.<snip>
Good luck. I'll watch this thread just in case...

Clark...

When I used UBCD4Win some six months ago I found that it could
do just about everything under the sun, except perhaps make a cup
of coffee. The only snag was that it consistently took ten minutes to
boot up, which is a helluva long time when you have an impatient
client breathing down your neck.

 

[Pegasus \(MVP\)]

DOS won't help you because DOS does not recognise NTFS.
Here are a few options:
- Boot into the Recovery Console.
- Connect the disk as a slave disk to some other WinXP/2000 PC.
- Boot the machine with a Bart PE boot CD.

Creating a Bart PE boot CD may take a couple of hours but this
tool is IMO an indispensable tool for a sysadmin.

Note also that an infected machine is a compromised machine.
Not all damage caused by a virus can be removed.

Well, only problem is that this is a laptop......so, a bit
harder......

=================

Well, it depends on the laptop. With some (e.g. Thinkpads, Toshibas)
you need to remove one screw to take out the disk. With others you
need to disassemble the whole damn laptop. The thinner the laptop,
the harder it gets.

Once you have it out it's child's play to put it into a 2.5" USB case.

 

[artmerar]

You can't run DOS on NTFS, but you can get a good emulation:

Restart the computer and as soon as you see that first page start tappingF8
once a second until you get a menu.  Select Safe Mode with Command Prompt.

Unfortunately with the virus, I cannot even boot into any mode. Safe,
Command or otherwise.....I need to somehow boot into some DOS mode and
remove these files........

If I can boot from a CD, and let it user programs on the CD only, but
allow me to browse the hard drive, I can probably do it.......but none
of the offending files can be in use.

 

[artmerar]

When I used UBCD4Win some six months ago I found that it could
do just about everything under the sun, except perhaps make a cup
of coffee. The only snag was that it consistently took ten minutes to
boot up, which is a helluva long time when you have an impatient
client breathing down your neck.- Hide quoted text -

- Show quoted text -

Clark,

Does this mean accessing an NTFS paritition? What about files in use?

 

[Clark]

DOS won't help you because DOS does not recognise NTFS.
Here are a few options:
- Boot into the Recovery Console.
- Connect the disk as a slave disk to some other WinXP/2000 PC.
- Boot the machine with a Bart PE boot CD.

Creating a Bart PE boot CD may take a couple of hours but this
tool is IMO an indispensable tool for a sysadmin.

Note also that an infected machine is a compromised machine.
Not all damage caused by a virus can be removed.

Pegasus you understand, unfortunately Original poster seems not to get it ..
artmerar, why not just read and learn and fix?
I sent you the link, asked you to read up, no sripts nothing to worry
about, If you don't trust me,, KF me, please don't waste my time,
I work 12 hours a day plus I try to help in 13 plus newsgroups, and that is
12 hours a day 6 days a week..ugh.
at least look at my advice ....

Clark...